10.3 Server - Permissions for an images Share Point?

Hello,
I'm running 10.3 Server and I want to create a Share Point that acts as an images and logos depot. I want Guest users to access the folder, but I don't want them to be able to delete folders or files. At the same time, I want them to be able to copy the images and logos from the server and be able to edit them locally.
Right now I have permissions set to Everyone = READ ONLY — so, they can't delete from the server, but at the same time, when the copy to their machine via Guest access, the files are still READ ONLY and they can't edit (without doing a save-as).
Is there any way to set up a Share Point to do what I want?
Thanks,
Kristin.

Hey Tony (or anyone else),
I've finally got 10.5.4 Server up and running on a new Intel Xserve and I've set up all the users (home directories are on client machines, not network home folders) and groups. I went about building the images volume last night, and even though I'm now using ACLs (which is awesome), I'm still having the same issue I was having under 10.3 with respect to this issue. Basically, what I'm looking to do is this — I have a share point (mountable volume) called "Digital Resources", and within that share point is a folder called "Images". This "images" folder contains our master images library. I have a group called "Design" which has read-only access to "Digital Resources" as I want them to be able to view the library, but not make any modifications to files while on the server. But, I also want them to be able to copy images FROM the server onto their local desktop and have the ability to edit them (crop, resize, etc. based on their artwork requirements). The problem is, when they copy from the server to their local desktop, the files they copy come over with read-only permissions (which means they can't save their edits without doing a save-as, etc.). What do I need to do to make it so that when they copy a from the server to the desktop, the file inherits the local permissions, thus allowing them to "own" the file (without them having to deal with permission changes themselves)? We're potentially talking hundreds of images on a daily basis.
Thanks!
Kristin.

Similar Messages

Aperture 3 default file permissions for referenced images

Hi,
This might be a bit more an OS X question than an Aperture question, but perhaps asking this here might help other people with similar case.
Is there a way to change the default file permissions Aperture 3 sets for image files imported from a digital camera?
My wife and I both import photos from our camera to a directory hierarchy under /Users/Shared/Photos/, and we both have our own Aperture libraries which reference the masters from that location.
However, when one of us imports photos from the camera, the permissions for the image files are set as 600 and the permissions need to be changed into 660 (for example) or otherwise the images are not readable for the other. (In the shell umask shows 0022 by default, but as I start the Aperture from the dock, changing the umask in the shell doesn't help)
Message was edited by: AJH75

Hi,
This might be a bit more an OS X question than an Aperture question, but perhaps asking this here might help other people with similar case.
Is there a way to change the default file permissions Aperture 3 sets for image files imported from a digital camera?
My wife and I both import photos from our camera to a directory hierarchy under /Users/Shared/Photos/, and we both have our own Aperture libraries which reference the masters from that location.
However, when one of us imports photos from the camera, the permissions for the image files are set as 600 and the permissions need to be changed into 660 (for example) or otherwise the images are not readable for the other. (In the shell umask shows 0022 by default, but as I start the Aperture from the dock, changing the umask in the shell doesn't help)
Message was edited by: AJH75

Failed to get the Availability State on server Distriubtionpoint1 for role SMS Distribution Point

Distriubtionpoint1-- Server share distribution point
Distriubtionpoint1-- Acting as site system role (DP)
Distriubtionpoint1--attached under the primary PR0 (Primary server0)
Primary server0-- reporting to CS0 (central site 0)
Distriubtionpoint1-- Windows 2008 sp1 r2 standard
Infrastructure details:-
=============
Distriubtionpoint1 located in different domain with one way trust.
1) Check ping status with FQDN from both domain and it is success.
2) Check port 135, 445, 80,443 through telnet from both domain and success.
3) Primary Server0 account is member of the local admin group on Distriubtionpoint1.
4) Check the PR0-SCCM-DP$ folder NTFS & Share permission
Share permission
a) everyone & local admin group has full control
Security permission
a) System has full permission
b) user has read & exec
4) Local admin full
Sitestat.log error message:
---->: Failed to get the Availability State on server
Distriubtionpoint1 for role SMS Distribution Point. SMS_SITE_SYSTEM_STATUS_SUMMARIZER 4/22/2014 9:00:15 PM 952 (0x03B8)
---->: Now polling via NAL for SiteObject "["Display=\\Distriubtionpoint1\PR0-SCCM-DP$\"]MSWNET:["SMS_SITE=PR0"]\\Distriubtionpoint1\PR0-SCCM-DP$\" SMS_SITE_SYSTEM_STATUS_SUMMARIZER
4/22/2014 9:00:15 PM 952 (0x03B8)
for ["Display=\\Distriubtionpoint1\PR0-SCCM-DP$\"]MSWNET:["SMS_SITE=PR0"]\\Distriubtionpoint1\PR0-SCCM-DP$\, no connection account is available SMS_SITE_SYSTEM_STATUS_SUMMARIZER
4/22/2014 9:00:15 PM 952 (0x03B8)
---->: The NAL path ["Display=\\Distriubtionpoint1\PR0-SCCM-DP$\"]MSWNET:["SMS_SITE=PR0"]\\Distriubtionpoint1\PR0-SCCM-DP$\ is currently not accessible. SMS_SITE_SYSTEM_STATUS_SUMMARIZER
4/22/2014 9:00:18 PM 952 (0x03B8)
Info>: Unable to get available space for the Site Object ["Display=\\Distriubtionpoint1\PR0-SCCM-DP$\"]MSWNET:["SMS_SITE=PR0"]\\Distriubtionpoint1\PR0-SCCM-DP$\ SMS_SITE_SYSTEM_STATUS_SUMMARIZER
4/22/2014 9:00:18 PM 952 (0x03B8)
STATMSG: ID=4701 SEV=I LEV=M SOURCE="SMS Server" COMP="SMS_SITE_SYSTEM_STATUS_SUMMARIZER" SYS=Distriubtionpoint1 SITE=PR0 PID=4112 TID=952 GMTDATE=Wed Apr 23 01:00:18.002
2014 ISTR0="\\Distriubtionpoint1\PR0-SCCM-DP$" ISTR1="\\Distriubtionpoint1\PR0-SCCM-DP$" ISTR2="2014 04 4 17 04 31 31 000" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8=""
ISTR9="" NUMATTRS=0 SMS_SITE_SYSTEM_STATUS_SUMMARIZER 4/22/2014 9:00:18 PM 952 (0x03B8)
for ["Display=\\Distriubtionpoint1\PR0-SCCM-DP$\"]MSWNET:["SMS_SITE=PR0"]\\Distriubtionpoint1\PR0-SCCM-DP$\, no connection account is available SMS_SITE_SYSTEM_STATUS_SUMMARIZER
4/22/2014 9:00:18 PM 952 (0x03B8)
---->: GetOperationsManagementData failed to connect to ["Display=\\Distriubtionpoint1\PR0-SCCM-DP$\"]MSWNET:["SMS_SITE=PR0"]\\Distriubtionpoint1\PR0-SCCM-DP$\; error
= 5. SMS_SITE_SYSTEM_STATUS_SUMMARIZER 4/22/2014 9:00:20 PM 952 (0x03B8)

I have tried to access the server share DP from the primary server by using my user
credential. Yes I can able to access the share.
But when I use the system credential to access the share received an error message as shown in below screenshot
Hence i have provided the share and ntfs permission administrators, system, everyone,
primary server account with full control on both tab. but still i am receiving error message.
:\temp>whoami
US\prasath
c:\temp>dir \\PrimaryServer1\SCCM-DP$
Volume in drive \\PrimaryServer1\SCCM-DP$ is Data
Volume Serial Number is 22F0-661B
Directory of \\PrimaryServer1\SCCM-DP$03/17/2014
03:33 PM <DIR> .03/17/2014 03:33 PM <DIR> .
04/01/2014 08:04 AM <DIR> SMSPKG
0 File(s) 0 bytes
3 Dir(s) 514,625,064,960 bytes free
===========================================
C:\Windows\system32>whoami
nt authority\system
C:\Windows\system32>dir
\\PrimaryServer1\SCCM-DP$
Access is denied.

Sharepoint server get all Updates except share point Updates

hi
I have a sharepoint server that sharepoint 2013 has installed on that .my Update server is sccm 2012 r2 and I checked all office 2003,2007,2010,2013 product to be synchronized .every thing is good sccm work fine in synchronizing update with Microsoft.and the
share point server OS gets Updates finely .But the Problem is here that share point service doesn't get any updates .all updates deployed to OS except share Point updates.
whats the solution ?
thanx

I checked those files .but there weren't any errors .I checked them through reporting but it still says that those
Updates are not required whereas the server doesn't installed any share point Updates.
http://support2.microsoft.com/kb/2767999
A change in the package configuration was introduced after SharePoint Server 2013 was released. You must install this public update before you install later SharePoint updates.
Note This update is available only from the Download Center and is currently not available from Microsoft Update.
https://www.microsoft.com/en-us/download/details.aspx?id=36989
Due to a change in the package configuration introduced after SharePoint 2013 RTM the March Public update is a mandatory requirement in order to install subsequent SharePoint Updates.
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)
thanks for reply
But before I've got another share point server 2013 and wsus server (not sccm) .that was ok with all Updates .
I didnt do any thing special in that case.like installing some hotfixes or anything else.

OS X Server Permissions for Shared Folder

I'm running the latest version of OS x Server. 10.9.3 Server
File Share and Time Machine services enabled.
I have shared a folder on an external drive. called "Storage"
Some of the files can not be accessed by some users.
Is there a way just to allow all the users to have full access to every file that is stored in the shared folder?
It seems some people can open some files and some users can't. Then I manually have to set the permissions to that file.
What am I missing? I have selected the "Shared Folder"
everyone has Read & Write Access (Along with admin, system and wheel.
Does anyone know how to fix this?

Set up the ACL in the Storage tab of Server.app, then choose Propagate Permissions... from the popup menu with the gear icon.

Windows server permissions -- access limited by share

This user belongs to a group whose share permissions are set to Read. This should be changed to Full Control?

I'm having a weird issue and need some help going in the right direction.
I am trying to determine why a user can't get write access to a folder.
When I check the effective access I see that "Share" is listed many times as the reason that access is limited (Access limited by column).
How do I determine which share is causing this?
This topic first appeared in the Spiceworks Community

Document Check in /Check out permissions in document library share point 2010

Hi ,
I have created a approval work flow for document templates library .I need to create a group to have upload,amend changes through check in and check out.The group which has all rights can upload documents and amend new changes which other groups
cannot do.Could any one tell me how to do this.

Hi .NET User,
According to your description, my understanding is that you want to create a group that allows user upload document through check in and check out.
I suggest you can create a group with contribute permission level to achieve it.
More information for your reference:
https://support.office.com/en-US/Article/Default-permission-levels-bb671e91-77aa-4aa0-a28e-7ffd3523d32d?ui=en-US&rs=en-US&ad=US
https://answers.uchicago.edu/32617
http://office.microsoft.com/en-001/sharepoint-server-help/edit-create-and-delete-permission-levels-HA101805381.aspx
Best Regards
Zhengyu Guo
TechNet Community Support

FTP - Share Points Disapearing

On our server I've setup FTP access to certain groups. One being a public group - only access to one directory (public ftp) and another group which has access to all share points. Permissions are set using ACLs for both groups to their respective directories.
So now when a user logs in that has access to all share points, we don't see all the share points anymore we only see the public share point. If I turn off FTP as a protocol for all the share points - all the aliases show up. Turn on the protocol they disappear.
Any ideas insight?

Ok, solved. It was simply a permissions issue with the symbolic links. I assumed that since the server automatically generated these when you turn on FTP sharing that it would grant read access for everyone.
Well I was mistaken - had to update the permissions on the links to allow everyone read access. They now show up and users can browse the directories that they have permission to.

FTP root & share points - how can I disable the latter?

I'm new to the Mac world and I'm in the process of configuring a Mac OS X server to run Contribute 3.
The server will be used to host a single site and the FTP is working now.
Question is, how can share points be disabled?
In the FTP root (libary/webserver/documents/) the following 3 files always get created automatically (I've tried deleting them as root):
Groups
Public
Users
Is there a way to disable them? I was thinking of placing the website one folder away from the ftp root, but that could make things too complicated for users.
Please advise!

Anyone?
I removed the share points in the Workgroup Manager but they still show up when I ftp into the server (set to ftp root & share points).
Does anyone know how to get rid of them permanently?
If that is all it should take, please post... The system has been unable to save all settings as an account was deleted and the OS placed certain folders into the "unkown" ownership which is the topic in another thread:
Perfect Shot, "Xserv - user settings are not saved - help!", 06:01pm Sep 19, 2005 CDT

Automount Share points not showing up?

So I've got a Share point named 'Documents', 'Enable automount' is check and it has a custom path of '/Network/Documents'. (BTW, is the appropriate place for that?)
When I log in as a user I can see that the directory '/Network/Documents' is being created (by clicking on 'All...' in the finder sidebar), but nothing useful is happening with it... double-clicking on it takes me into the folder about 0.5 to 1 second then "redirects" me back to the 'Network' folder.
I don't get usable icons (on the desktop) for the 'Documents' share until I go Shared > MyServer > Documents ... only then do I see the share point in any sort of usable state.
Am I missing something? I assumed that making something automount would place it on the desktop or the sidebar or something when the user logs in.

+I assumed that making something automount would place it on the desktop or the sidebar or something when the user logs in.+
No. An automount only works if your server is configured to host a shared LDAP domain (OD Master) and the client is bound to that domain (so that it can read the mount record).
With that said, there are two types of automounts available via AFP:
*A Dynamic Automount*, which is typically used for the home directory share point(s). Dynamic mounts "eject" and remount as the user who is logging in at login time. The mount path is configured automatically in /Network/Servers.
For example, a share point configured to automount (located at /Volumes/Data/Homes on the server with name myserver.myco.lan) will dynamically automount at this path on the client:
/Network/Servers/myserver.myco.lan/Volumes/Data/Homes
*A Static Automount*, which is typically used for sharing common files; a shared Library is an example. Static automounts mount at /Network/mountname, and are done at startup time. Generally speaking, these will only work if one of the following is true:
1. AFP Guest access is on for the share point being statically automounted. (Make sure that AFP guest access is on for the AFP service and on for the share point. Disable it for any other share points that don't need AFP guest access.) In this case, the automount will be mounted as the AFP guest user, not the currently logged-in or connected user.
2. The client system is bound to an Open Directory Master via directory binding, and Kerberos is working properly on the master. In this case, the static automount will mount as the logged-in user.
If you just want to make a share point mount automatically at login time, consider adding the AFP share point's URL to the user's login items instead of creating an automount. This will mount the share point in the "classic" manner, where it appears in the Computer window and on the Desktop.
To do so, you can manage the login items (loginwindow.plist or com.apple.loginitems.plist) for the user or group via Workgroup Manager. Open TextEdit (for example), and type the URL for connecting to the share point - afp://myserver.myco.lan/stuff, for example - and drag that text onto the Desktop to create an AFP Internet Location file. Then drag that file into the login items section of Workgroup Manager to add it.
If your server has Kerberos running, you're set. When a client logs in, he/she gets a Kerberos TGT from the KDC and a service ticket for AFP which mounts the share point; no name and password to re-enter. If not, you can check the "connect with user's name and password" box in the login items section of Workgroup Manager to have login window hold the user's name and password temporarily and enter it for him/her.
Also note that Leopard clients don't automatically show mounted share points on the Desktop (but they do appear in the Computer window of the Finder and in the SHARED section of the sidebar). If you'd prefer to have users see shares on the Desktop again, you can manage that via Workgroup Manager's Finder preferences section.
Hope this helps!
--Gerrit
Message was edited by: Gerrit DeWitt

Tiger client can not mount the chinese named share point

We have a Snow Leopard Server running AFP with some share points.
Other clients include Macs and Windows XP/Vista connecting well, beside a 10.4.11 powerbook,
this Tiger Macs can also connect with the English name share points,
but while mount the Chinese name share points,
It showed the error means can't find the directory.
Is that a bug?

more information:
nidump -r /exports .
"name" = ( "exports" );
CHILDREN = (
"clients" = ( "192.168.0.10" );
"name" = ( "/backup" );
"opts" = ( "" );
showmount -a returns:
Exports list on localhost:
/backup 192.168.0.10

SQL Server Agent Permissions for backing up on network share

I'm new to managing SQL Server and I'm not too familiar on how to get this going. I'm trying to automate a T-SQL script that I got from here:(http://community.spiceworks.com/scripts/show/1511-back-up-all-databases-in-sql-instance-with-one-scr...).I have my SQL server agent enabled already but according to the notes in the script, I need to change my account that I have the SQL server agent to a network account. I'm not too sure how to do this. I'm running SQL Server 2012 (non express)My server is a standalone server and I need to backup the SQL database to a NAS on the network. I created a user account on the NAS already. I tried to run the Maintenance Wizard and do a backup that way but when I try to browse for the network share that's mounted, I don't see it. I know that the account that's running under the SQL server agent doesn't...
This topic first appeared in the Spiceworks Community

What you might have missed this past week from the Spiceworks Community, in brief.When JJoyner1985asked if he was"expecting too much from his help desk?" the Spiceworks Community got to talking over the finer points of what a help desk should do and how technically proficient and proactive help desk techs should be. The community then discussed some fresh security problems, the finer points (and rationale) behind free software, how to start an IT career after 30, Lockheed Martin's new open source security tool, Shadow IT, and how different organizations get their users to submit tickets.Am I expecting too much from my help desk?
Careers– Following the motif ofdiscussions concerning what a sysadmin should know, I want to get some idea from the community regarding how much you would expect your help desk staff to know and do. My help desk...

Permissions for website directories/files & Share Points for managing files

Hello.
I'm wondering if anyone could lend some advice in how to best set up permissions, both POSIX and ACLs, for the following setup?
#1 - Permissions for directories and files for hosting a website (via OS X 10.5 "Web" GUI). Basically, I'm curious as to what people suggest for the basic files for the directory (and sub-directories and files) that go into the backend (html, images, etc.) of a website? I'm going to be being files over from another machine, so I may need to propagate these permissions once they've been moved over?
#2 - Permissions (ACL) for allowing users to access these directories and files for editing, etc. via client Macs on our LAN (this server is going to be a development web server for initial building/testing).
Any advice would be much appreciated!
Thanks,
Kristin.

Hi Kristin,
The "other" or "everyone" group should not have "write" permissions to any files under your website document root folder. The Apache web server runs as user "www" ... "www" is usually in the "everyone" group, thus allowing read-only access to the website.
You can set up the owner of your files to an admin account. Perhaps set up a group with write permissions to the file shares where your website files are.
You must first analyze who should have access to what, base your groups on that ...
Ted

Different passwords for different share points on 1 server?

On a lion server I have two share points.
A 'general' is accessible for all users, a 'confidential' is for a select group of users.
The permissions are set and the select group have their server access password in their key chain.
The server password is stored in a separate key chain ie. not in the login key chain.
The select users connect to the server and allways mount the 'general' share point.
The 'confidential' share point is mounted only when needed and unmounted afterward.
Problem is when the users walk away from their computer and forget to lock the computer or to completely disconnect from the server, which is generally very inconvenient because of open documents.
"Unmounting" the confidential share in my setup is not really putting it away securely because at that moment, anyone can sit down at that computer and mount 'confidential' because the login credentials were already given when mounting 'general'.
Is there any way, lest having Parallels running another Lion server that shares the 'confidential' mount point, to force users to enter a password before 'confidential' can be mounted WHILE 'general' IS ALREADY MOUNTED?
In other words, can credential exchange be tied to share point mounting time rather than to server connection time and thus be different for different shares and allow for share-specific unmounting, effectively locking it away?

Has nobody done this before?

Permissions for Linux user accessing Leopard share

We have a very simple networking setup at our video post production facility. Basically, files are shared everywhere and to everyone. No open directory or DNS serving. Just AFP and SMB.
Our Linux based Smoke/Flame/Lustre system needs access to the files severed/shared by an Xserve with a big attached RAID. It has no problem connecting or seeing the files. However, it typically is denied write permissions. When the Smoke operator creates a folder on the share he can't access the folder until I grant the Others/Everyone group read and write perms. The Linux user logs in with the same user account that everyone else uses.
Some time ago, the always smashing Gerrit DeWitt gave me some terminal commands to set ACLs for users/groups of this shared RAID. They work beautifully and I have had no permissions issues since applying them. Except for this Linux system.
Would it be good practice to use this command to set the Everyone group permissions for this share?
sudo chmod -R +ai "group:everyone allow readattr,readextattr,readsecurity,\
list,search,read,execute,writeattr,writeextattr,delete,\
append,write,deletechild,add_file,addsubdirectory,\
fileinherit,directoryinherit" "/Volumes/RAIDH/Smoke_InfernoStorage"
Also, is there some configuration change I could make to the Linux system to make it a little more Mac compatible in this area?
Thanks

It's worth checking into - let us know what you find. What you describe certainly sounds like a problem with permission propagation settings for SMB / Samba since the AFP side works fine.
I've seen other posts about problems that crop up because of differences in the versions of Samba employed between systems, so that's a possibility as well. And I'd have no suggestions for you in that regard other than some searching of the web for clues as to how to work with that issue.
-Doug

10.3 Server - Permissions for an images Share Point?

Similar Messages

Maybe you are looking for